Reply to: Audit software

[vetran]

used this before

Order Asset Tracker for Networks

wasn't terrible, used to be very cheap.

we have SCCM now and of course no one knows what we have got.

[original PM]

Audit software that can capture relevant info from devices over the network typically requires you to deploy a client on every end point, or for those end points to have WMI enabled.

Either of those is going to need you to work with local IT support to get them installed or enabled so you need to make sure the client is aware of this and ready for it.

If their InfoSec guys are up to scratch or they have a half decent change management process in place then don't expect it to happen overnight.

Exactly this - I am sure where we are it took 5 years to do - about 2500 items of kit spread over 1000 sites in england, scotland, wales and NI.

it can be a complete pita

Also ensure any new kit which gets sent out has the correct build to allow for automating gathering this info otherwise you just never get anywhere.

[LondonManc]

Yep, that's why I asked the question. Because if it's a discovery of all connected devices, there is no way in hell to do that remotely and being even remotely accurate. The only way is rolled up sleeves and crawling under desks.

OP says the task is to "complete an audit of IT equipment". It mentions nothing about the power status of said equipment. Get your clipboard, pen and kneepads out fella!

[sal]

There's also network devices, LOMs, printers etc to consider of the OP has been challenged with devices such as those. From memory I used SNMP in the past, suspect things have moved on now though...

Yep, that's why I asked the question. Because if it's a discovery of all connected devices, there is no way in hell to do that remotely and being even remotely accurate. The only way is rolled up sleeves and crawling under desks.

[LondonManc]

Early days I did the same at Hunterston B and Torness power stations, all sorts of gadgets connected to PC's, no idea what they were or even if it was safe to touch them! Serial and parallel attached......

All I had was a notepad (paper one) and an Excel spreadsheet back at the office in East Kilbride....

Happy days, eh!??

Correct. If something's not powered on, or is in a cupboard in storage, but not within IT, how can you detect it over the network? Never underestimate how sneaky some people are when it comes to kit going missing.

[stek]

Give or take knackered patch cables and ports not showing you pieces of kit up, that could be fun. If you're being paid T&M to do the audit, buy a new pair of comfy shoes, order a polo shirt, work pants and fleece with your company logo on and get wandering.

Early days I did the same at Hunterston B and Torness power stations, all sorts of gadgets connected to PC's, no idea what they were or even if it was safe to touch them! Serial and parallel attached......

All I had was a notepad (paper one) and an Excel spreadsheet back at the office in East Kilbride....

Happy days, eh!??

[LondonManc]

You missed a vital detail - Were you asked to audit the state of known devices, or discover all devices in the DC/estate or both?

For windows environment your best bet is PowerShell & WMI, quick and painless.

For *nix i sincerely hope Client Co is using a combination of Puppet/Chef/Ansible/Salt that should be your first point of reference.

Give or take knackered patch cables and ports not showing you pieces of kit up, that could be fun. If you're being paid T&M to do the audit, buy a new pair of comfy shoes, order a polo shirt, work pants and fleece with your company logo on and get wandering.

[stek]

You missed a vital detail - Were you asked to audit the state of known devices, or discover all devices in the DC/estate or both?

For windows environment your best bet is PowerShell & WMI, quick and painless.

For *nix i sincerely hope Client Co is using a combination of Puppet/Chef/Ansible/Salt that should be your first point of reference.

There's also network devices, LOMs, printers etc to consider of the OP has been challenged with devices such as those. From memory I used SNMP in the past, suspect things have moved on now though...

[sal]

You missed a vital detail - Were you asked to audit the state of known devices, or discover all devices in the DC/estate or both?

For windows environment your best bet is PowerShell & WMI, quick and painless.

For *nix i sincerely hope Client Co is using a combination of Puppet/Chef/Ansible/Salt that should be your first point of reference.

[DaveB]

potential new contract will require me to complete an audit of IT equipment at various sites.

So rather than attending every device to manually audit. I want to deploy some decent (& free ideally) audit software onto a local DC
and automate the process. So I can produce a report from each site as to what equipment is on site.

Would like to capture make & model of pc/laptop serian numbers so I can check if still in warrenty, software installed.

Does anybody have experience of doing a similar task & can you recommend a good audit product that will be capable of my goal.

Thanks

Audit software that can capture relevant info from devices over the network typically requires you to deploy a client on every end point, or for those end points to have WMI enabled.

Either of those is going to need you to work with local IT support to get them installed or enabled so you need to make sure the client is aware of this and ready for it.

If their InfoSec guys are up to scratch or they have a half decent change management process in place then don't expect it to happen overnight.

[northernladuk]

Don't you ever get bored with having to reply to every thread even if it's only to make sarky comments that add no value?

Hell no. Best bit about the forum. If I didn't pr1 wouldn't be able to do any trolling anyway.

And I think it is a perfectly reasonable. Having to ask about software to do a gig he's being paid top dollar for as an expert? The software is the easy bit. He's forgetting the point about whether a client will allow free software he knows nothing about on their system that's going to do network wide investigations which I would have thought was his main problem.

[NotAllThere]

Don't you ever get bored with having to reply to every thread even if it's only to make sarky comments that add no value?

Well apparently you don't!

However, I do think awkward's question is perfectly reasonable. Funny though. Equipment audits I've observed have been typically carried out using students

[BigRed]

With Powershell and WMI it shouldn't be too difficult. You will find some code on Github and Codeplex. For personal use I've used Belarc Advisor, they don't licence it for corporate use but they have slightly different paid for options.

[quackhandle]

Don't you ever get bored with having to reply to every thread even if it's only to make sarky comments that add no value?

Think of it as contractor training for when you work with the permies.

Good luck.

qh

[pr1]

Don't you ever get bored with having to reply to every thread even if it's only to make sarky comments that add no value?

29900 comments and counting, what do you think